General
- Target 2026-07-21_ebdfe221141742d7626087d14f4fa4bd_amadey_elex_smoke-loader_stop_tofsee
- Size 227KB
- Sample260721-bepffacv6v
- SHA256 bdd96add334af45e68692b200970bf397e308a15e492246f9701bccae0e7f145
- MD5 ebdfe221141742d7626087d14f4fa4bd
- SHA1 387ec695191ff3e84142af96aef51e04136d1a01
- SHA512 bf895f50b92e392e24d423050580836b2f59bfdfa1307bf4900a60cedbb383df79dacaf54228aec43206c213c81e0b62cf9286a6da3f4645590b270a8e0cdd1b
- SSDEEP 3072:1DTKW8f21HnSL2O9DwK2L4Jis6BJmwCGOxLaGwZ5ZgmvxUYLotj5G5YSg8czU:1DSf21HSL9B2LU6zOxkomvxUCnbg8cz
- TLSH T18A349D1472D0D032E19355728324C7B15F7B7872563AA98F7BC10BBA4F24BEEA72534A
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-21_ebdfe221141742d7626087d14f4fa4bd_amadey_elex_smoke-loader_stop_tofsee.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-21_ebdfe221141742d7626087d14f4fa4bd_amadey_elex_smoke-loader_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Family
-
smokeloader
Botnet
-
pub4
Extracted
Family
-
smokeloader
Version
-
2020
C2
-
http://xsss99.icu/upload/
-
http://bingooodsg.icu/upload/
-
http://junntd.xyz/upload/
-
http://ginessa11.xyz/upload/
-
http://overplayninsx.xyz/upload/
-
http://bananinze.com/upload/
-
http://daunimlas.com/upload/
rc4.i32
rc4.i32
Targets
-
- Target 2026-07-21_ebdfe221141742d7626087d14f4fa4bd_amadey_elex_smoke-loader_stop_tofsee
- Size 227KB
- SHA256 bdd96add334af45e68692b200970bf397e308a15e492246f9701bccae0e7f145
- MD5 ebdfe221141742d7626087d14f4fa4bd
- SHA1 387ec695191ff3e84142af96aef51e04136d1a01
- SHA512 bf895f50b92e392e24d423050580836b2f59bfdfa1307bf4900a60cedbb383df79dacaf54228aec43206c213c81e0b62cf9286a6da3f4645590b270a8e0cdd1b
- SSDEEP 3072:1DTKW8f21HnSL2O9DwK2L4Jis6BJmwCGOxLaGwZ5ZgmvxUYLotj5G5YSg8czU:1DSf21HSL9B2LU6zOxkomvxUCnbg8cz
- TLSH T18A349D1472D0D032E19355728324C7B15F7B7872563AA98F7BC10BBA4F24BEEA72534A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Deletes itself
-
Loads dropped DLL